HP-UX 11.04 (VVOS) Virtual Vault/IPlanet Web Server DoS Vulnerability
BID:3709
Info
HP-UX 11.04 (VVOS) Virtual Vault/IPlanet Web Server DoS Vulnerability
| Bugtraq ID: | 3709 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2001-0606 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 14 2001 12:00AM |
| Updated: | Jul 11 2009 09:06AM |
| Credit: | This vulnerability was originally publicized in a Hewlett-Packard Company Security Bulletin on February 14th, 2001. |
| Vulnerable: |
HP VirtualVault 4.0 |
| Not Vulnerable: | |
Discussion
HP-UX 11.04 (VVOS) Virtual Vault/IPlanet Web Server DoS Vulnerability
A vulnerability exists in the IPlanet Web Server(iWS) Enterprise Edition 4.x packaged, which is embedded in Virtual Vault 4.0 on HP-UX 11.04 (VVOS) systems.
The vulnerable software is prone to an error which may cause a denial of service when handling HTTPS requests. It may be possible for this condition to be exploited by a remote attacker.
Netscape Enterprise versions 3.x are not affected by this issue.
A vulnerability exists in the IPlanet Web Server(iWS) Enterprise Edition 4.x packaged, which is embedded in Virtual Vault 4.0 on HP-UX 11.04 (VVOS) systems.
The vulnerable software is prone to an error which may cause a denial of service when handling HTTPS requests. It may be possible for this condition to be exploited by a remote attacker.
Netscape Enterprise versions 3.x are not affected by this issue.
Exploit / POC
HP-UX 11.04 (VVOS) Virtual Vault/IPlanet Web Server DoS Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
HP-UX 11.04 (VVOS) Virtual Vault/IPlanet Web Server DoS Vulnerability
Solution:
This issue is addressed in patch PHSS_23215 for HPUX VVOS 11.04. A few things should be noted about the availability of this patch:
PHSS_23215 is dependant upon the installation of patch PHSS_22918. The system must be rebooted after PHSS_23215 is installed.
Patch PHSS_23215 is not available through the HP IT Resource Center(http://itrc.hp.com/), due to the large size of the patch and export controls.
To obtain the patch, please contact your local Hewlett-Packard Company Response Center so that they can make arrangements for a ftp transfer.
Solution:
This issue is addressed in patch PHSS_23215 for HPUX VVOS 11.04. A few things should be noted about the availability of this patch:
PHSS_23215 is dependant upon the installation of patch PHSS_22918. The system must be rebooted after PHSS_23215 is installed.
Patch PHSS_23215 is not available through the HP IT Resource Center(http://itrc.hp.com/), due to the large size of the patch and export controls.
To obtain the patch, please contact your local Hewlett-Packard Company Response Center so that they can make arrangements for a ftp transfer.
References
HP-UX 11.04 (VVOS) Virtual Vault/IPlanet Web Server DoS Vulnerability
References:
References: